Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
File:                     qZ9mmGknIBFUlstFlwLEOtxI1q0.mft (raw, json)
Hash identifier:          Rq0bhNpsHvaslfasl9PGlBYVirixVKJTpEIOmvEgRho=
Subject key identifier:   B4:29:2E:FA:D9:4D:62:77:80:C1:40:54:DA:C4:67:19:F8:36:2A:88
Authority key identifier: A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD
Certificate issuer:       /CN=A91CACCA/serialNumber=A99F6698692720115496CB459702C43ADC48D6AD
Certificate serial:       353A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
Manifest number:          353A
Signing time:             Tue 12 May 2026 15:15:18 +0000
Manifest this update:     Tue 12 May 2026 15:15:18 +0000
Manifest next update:     Tue 19 May 2026 15:15:18 +0000
Files and hashes:         1: qZ9mmGknIBFUlstFlwLEOtxI1q0.crl (hash: ohHfZ54puHRkTP4+br9qxLTT5kAuI0LDbgUPjZq2cSc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl
                          rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:15:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13626 (0x353a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CACCA, serialNumber=A99F6698692720115496CB459702C43ADC48D6AD
        Validity
            Not Before: May 12 15:15:18 2026 GMT
            Not After : May 19 15:15:18 2026 GMT
        Subject: CN=6a034406-5cb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:39:39:3e:e2:cd:24:6d:0a:3a:33:cd:4f:6b:
                    d4:3f:77:f4:43:07:70:89:6d:33:b0:c1:64:de:ed:
                    49:86:04:5a:a9:22:f7:9a:e5:78:a8:70:b5:60:bc:
                    b0:4d:e2:93:95:2d:44:49:72:fe:8d:9d:c9:e4:41:
                    48:8b:67:72:1c:48:1a:2c:d8:2c:68:f0:05:22:ee:
                    6d:11:ae:70:a7:51:d9:0b:9c:7d:c5:50:ee:ac:ed:
                    00:f4:d4:a1:ee:29:4a:ba:ff:57:d0:70:03:9d:bb:
                    b9:66:83:8a:92:c7:31:d7:33:d0:68:f6:b3:ce:9f:
                    d1:69:b9:40:d8:54:b8:7c:4b:34:4a:0e:4c:a7:a5:
                    65:9e:ff:d9:2d:4d:57:d7:d9:35:1e:b3:68:07:18:
                    e9:72:75:64:74:59:a4:f7:4f:30:e5:1e:c3:26:eb:
                    b5:88:b2:d2:ed:c5:bc:38:cb:9d:12:6a:45:62:72:
                    5e:fe:d5:b6:02:be:c0:33:34:f2:db:71:60:89:31:
                    11:7e:14:cd:73:e1:bc:31:11:e9:85:ad:7b:66:70:
                    70:eb:ee:c9:51:90:44:d8:ab:4c:e3:70:da:45:32:
                    44:48:48:29:e0:47:6b:9c:38:47:40:ba:c0:00:8c:
                    af:b7:eb:7a:22:be:51:b9:57:3b:8b:15:97:7d:ef:
                    8e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:29:2E:FA:D9:4D:62:77:80:C1:40:54:DA:C4:67:19:F8:36:2A:88
            X509v3 Authority Key Identifier:
                keyid:A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:a0:9b:8c:17:86:73:94:db:fc:ce:4f:c4:64:aa:37:c5:2a:
         72:33:2b:23:1a:ed:0e:c4:b1:23:44:47:07:8d:77:7c:d4:dc:
         11:32:f1:68:da:67:d0:fa:21:26:81:16:59:f0:9c:99:fc:17:
         f2:e8:a3:88:5b:0b:1c:3a:25:6c:6c:5f:b8:51:d2:2e:01:c1:
         93:87:ef:2f:45:45:18:f3:e6:2e:36:3a:f5:01:99:9c:5d:30:
         96:88:28:b7:c1:e8:56:ee:0d:36:13:98:3b:50:fc:14:31:58:
         b8:cc:a7:19:72:27:73:27:37:b5:17:bf:63:ca:e9:06:94:89:
         36:80:e1:39:43:cc:3d:f7:68:e4:06:a4:7f:47:3e:04:d4:36:
         01:82:a2:c1:79:d1:92:95:53:d3:05:5f:d1:af:d5:f0:a8:38:
         b8:45:5b:96:39:bd:38:05:d1:b5:fe:dd:11:7f:95:af:27:13:
         e7:e7:67:9f:ba:cd:f6:7b:7d:75:87:cd:a9:48:00:c9:3c:b1:
         3c:74:71:34:60:6b:e7:cc:a2:22:6a:58:e5:fe:dd:e1:27:24:
         77:dd:7d:a5:60:85:da:4a:8b:93:66:35:a8:93:84:c5:1e:31:
         b5:24:13:92:18:73:95:5c:be:65:b8:5c:fc:80:db:8b:7d:80:
         78:bb:da:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:50:01 2026 by rpki-client